On August 11, 2023, Cisco announced that Cisco SecureX will go end-of-life on July 31, 2024. The content in this Github repository will not be actively maintained following this announcement.

Request Firewall NullRoute

Workflow #0018

Response Workflow

This workflow submits a change request in ServiceNow with pre-defined ticket text and the observable provided as input to the workflow. Supported observable: ip


Change Log

Date Notes
Apr 1, 2021 - Initial release
Sep 10, 2021 - Updated to use the new system atomics
Aug 31, 2022 - Minor updates to naming and descriptions

See the Important Notes page for more information about updating workflows


  • The following system atomics are used by this workflow:
    • None
  • The following atomic actions must be imported before you can import this workflow:
  • The targets and account keys listed at the bottom of the page
  • ServiceNow

Workflow Steps

  1. Make sure the observable type provided is supported
  2. Calculate the ticket start and end time (defaults to three days from now from 2-5 AM eastern time)
  3. Create the change request in ServiceNow


  • Update the input variables on the ServiceNow - Create Change Request activity with your change request contents
  • Update the activities in the Calculate Dates group if you want to adjust the timeframe the change ticket is requested for
  • If you want to change the name of this workflow in the pivot menu, change its display name


Target Group: Default TargetGroup

Target Name Type Details Account Keys Notes
ServiceNow HTTP Endpoint Protocol: HTTPS
Host: <instance>.service-now.com
Path: /api
ServiceNow_Credentials Be sure to use your instance URL

Account Keys

Account Key Name Type Details Notes
ServiceNow_Credentials HTTP Basic Authentication Username: ServiceNow User ID
Password: ServiceNow Password